$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json) Hash identifier: YNc+r18SSGOo9sIqmYOaOz9FylLF9bxIPlgxcCw8blw= Subject key identifier: 76:AA:E7:97:99:09:B2:35:C9:91:02:DC:C8:DE:B7:EA:DE:B8:C4:19 Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Certificate serial: 049C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft Manifest number: 0495 Signing time: Sun 19 Oct 2025 01:52:45 +0000 Manifest this update: Sun 19 Oct 2025 01:52:44 +0000 Manifest next update: Sun 26 Oct 2025 01:52:44 +0000 Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: XufWEA6n3evNyw4Bk2YMsX4XTiAroWQQweapIrIHnnw=) 2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: R82yDGIsGFvNSThNuNqqir6NPI8oiHV+tooLUAlLp1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Validity Not Before: Oct 19 01:52:44 2025 GMT Not After : Oct 26 01:52:44 2025 GMT Subject: CN=68f4446d-48c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:12:70:01:6e:c0:d5:19:2c:bb:54:a7:22:ba: 65:b9:af:b1:15:fd:6c:45:44:58:43:ca:83:34:7c: 6d:07:70:91:75:1c:ec:02:a9:33:f3:60:de:7c:7d: 21:da:7b:f0:46:be:32:09:fa:9b:0b:fe:9d:bb:5f: 9e:dd:ff:20:07:40:9e:8f:3e:35:3c:c6:37:89:5a: c1:25:05:9a:35:99:d7:1a:00:19:e6:c1:32:34:f1: c2:78:e8:76:70:51:f5:21:28:6d:75:97:27:68:28: ea:c8:6f:7e:cb:84:8f:db:37:4a:f9:79:8d:15:c6: 07:bb:d5:0e:d0:22:f7:bd:2c:a9:5f:8c:0b:88:b1: 04:8d:ac:71:d9:b4:d7:f1:48:a6:2f:35:42:87:10: 11:a9:08:e0:01:a1:61:20:24:07:29:20:64:61:61: db:3f:4e:64:a3:59:e8:71:35:e5:c0:dc:15:aa:4e: 34:06:fd:f1:70:5b:9c:6d:37:37:82:99:ab:ad:85: 95:0d:4d:30:38:a8:7f:f4:f7:75:c3:fa:d8:9e:a4: 7f:4a:c2:39:6f:61:4d:fc:a3:f5:13:de:7c:56:6d: ab:ef:05:85:c1:2f:ac:ef:fc:69:ac:13:3d:30:1b: 8e:de:c7:f7:54:0a:ea:11:d2:fa:28:bc:d3:9a:d8: 7d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AA:E7:97:99:09:B2:35:C9:91:02:DC:C8:DE:B7:EA:DE:B8:C4:19 X509v3 Authority Key Identifier: keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:59:5e:bc:ce:01:20:2d:91:ae:3c:51:70:97:47:e6:2b:41: 65:4a:52:bb:fd:ff:01:b8:21:2f:f3:65:ba:79:10:76:0c:3c: dc:04:76:2b:cd:51:38:99:f0:a2:c6:fd:25:39:31:9f:38:89: 39:7a:2a:78:24:84:9b:e3:6e:39:4f:ea:6f:5b:76:4d:00:ab: 86:38:82:9c:56:7b:c5:0b:f4:70:d1:f7:79:00:03:7a:8a:f5: 1e:dc:3b:1e:a2:28:0d:21:00:63:a7:b2:17:27:05:3f:ca:46: 66:91:c9:9b:79:5d:d4:b5:25:8e:9e:c5:40:23:fa:f2:5e:86: 1d:1a:57:7e:40:12:9d:71:7c:2d:d1:95:a8:fa:6c:17:be:fd: 69:29:8d:9e:ad:bb:e1:a8:c6:1e:fd:a6:86:65:31:01:3c:d1: 5e:28:8e:62:49:39:8f:18:e7:18:5a:b5:9d:b2:b0:23:a4:d6: e3:57:cb:e7:5a:55:d2:7e:65:ca:ff:ce:43:52:2c:82:9e:21: cf:b9:b8:e5:39:c4:6a:d1:ab:4f:47:4f:68:80:40:5e:e7:29: 81:1c:7b:e4:3c:53:22:81:ea:8a:0f:aa:67:38:42:39:94:0e: ae:c2:98:5b:00:51:df:70:6e:75:d7:59:f0:42:c1:bf:d0:a1: 47:f4:90:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw OTYzNTNERDgwHhcNMjUxMDE5MDE1MjQ0WhcNMjUxMDI2MDE1MjQ0WjAYMRYwFAYD VQQDEw02OGY0NDQ2ZC00OGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxJwAW7A1Rksu1SnIrplua+xFf1sRURYQ8qDNHxtB3CRdRzsAqkz82DefH0h 2nvwRr4yCfqbC/6du1+e3f8gB0Cejz41PMY3iVrBJQWaNZnXGgAZ5sEyNPHCeOh2 cFH1IShtdZcnaCjqyG9+y4SP2zdK+XmNFcYHu9UO0CL3vSypX4wLiLEEjaxx2bTX 8UimLzVChxARqQjgAaFhICQHKSBkYWHbP05ko1nocTXlwNwVqk40Bv3xcFucbTc3 gpmrrYWVDU0wOKh/9Pd1w/rYnqR/SsI5b2FN/KP1E958Vm2r7wWFwS+s7/xprBM9 MBuO3sf3VArqEdL6KLzTmth9IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHaq55eZ CbI1yZEC3Mjet+reuMQZMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3 ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2 R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+WV68zgEgLZGuPFFwl0fmK0FlSlK7/f8BuCEv82W6eRB2DDzcBHYr zVE4mfCixv0lOTGfOIk5eip4JISb4245T+pvW3ZNAKuGOIKcVnvFC/Rw0fd5AAN6 ivUe3DseoigNIQBjp7IXJwU/ykZmkcmbeV3UtSWOnsVAI/ryXoYdGld+QBKdcXwt 0ZWo+mwXvv1pKY2erbvhqMYe/aaGZTEBPNFeKI5iSTmPGOcYWrWdsrAjpNbjV8vn WlXSfmXK/85DUiyCniHPubjlOcRq0atPR09ogEBe5ymBHHvkPFMigeqKD6pnOEI5 lA6uwphbAFHfcG5111nwQsG/0KFH9JDb -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:59 2025 by rpki-client